CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Schneider Electric | SCADAPack 47x | unaffected |
|
||||||
| Schneider Electric | SCADAPack 47xi | unaffected |
|
||||||
| Schneider Electric | SCADAPack 47xd | unaffected |
|
||||||
| Schneider Electric | SCADAPack 470R | unaffected |
|
||||||
| Schneider Electric | SCADAPack 57x | unaffected |
|
||||||
| Schneider Electric | SCADAPack 3xx | unaffected |
|
||||||
| Schneider Electric | SCADAPack 32 | unaffected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 11 Sep 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality. | |
| Weaknesses | CWE-522 | |
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: schneider
Published:
Updated: 2026-09-11T15:07:48.927Z
Reserved: 2026-08-27T16:49:45.578Z
Link: CVE-2026-81861
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses